Physical system access control

ABSTRACT

A machine access control system and corresponding method are provided. The machine access control system includes a camera configured to capture an input image of a subject purported to be a person associated with operating a particular workplace machine. The machine access control system further includes a memory storing a deep learning model configured to perform multi-task learning for a pair of tasks including a liveness detection task and a face recognition task. The machine access control system also includes a processor configured to apply the deep learning model to the input image to recognize an identity of the subject in the input image regarding being authorized to use the particular workplace machine and a liveness of the subject. The liveness detection task is configured to evaluate a plurality of different distractor modalities corresponding to different physical spoofing materials to prevent face spoofing for the face recognition task.

RELATED APPLICATION INFORMATION

This application claims priority to U.S. Provisional Patent ApplicationSer. No. 62/365,510, filed on Jul. 22, 2016, incorporated herein byreference herein its entirety. This application claims priority to U.S.Provisional Patent Application Ser. No. 62/366,285, filed on Jul. 25,2016, incorporated herein by reference herein its entirety. Thisapplication is related to an application entitled “Liveness Detectionfor Antispoof Face Recognition”, having Ser. No. 15/637,264, and whichis incorporated by reference herein in its entirety. This application isrelated to an application entitled “Camera System for TrafficEnforcement”, having Ser. No. 15/637,368, and which is incorporated byreference herein in its entirety. This application is related to anapplication entitled “Security System for Facility Access Control”,having Ser. No. 15/637,465, and which is incorporated by referenceherein in its entirety. This application is related to an applicationentitled “Login Access Control for Secure/Private Data”, having Ser. No.15/637,644, and which is incorporated by reference herein in itsentirety.

BACKGROUND Technical Field

The present invention relates to security and more particularly toliveness detection for antispoof face recognition.

Description of the Related Art

Face recognition has been used to recognize individuals. However,current face recognition systems and approaches are often spoofed usinginanimate objects. Thus, there is a need for an improvement to currentface recognition systems and approaches that is capable of thwartingspoofing attempts.

SUMMARY

According to an aspect of the present invention, a machine accesscontrol system is provided. The machine access control system includes acamera configured to capture an input image of a subject purported to bea person associated with operating a particular workplace machine. Themachine access control system further includes a memory storing a deeplearning model configured to perform multi-task learning for a pair oftasks including a liveness detection task and a face recognition task.The machine access control system also includes a processor configuredto apply the deep learning model to the input image to recognize anidentity of the subject in the input image regarding being authorized touse the particular workplace machine and a liveness of the subject. Theliveness detection task is configured to evaluate a plurality ofdifferent distractor modalities corresponding to different physicalspoofing materials to prevent face spoofing for the face recognitiontask.

According to another aspect of the present invention, acomputer-implemented method is provided for machine access control. Themethod includes capturing, by a camera, an input image of a subjectpurported to be a person associated with operating a particularworkplace machine. The method further includes storing, in a memory, adeep learning model configured to perform multi-task learning for a pairof tasks including a liveness detection task and a face recognitiontask. The method also includes applying, by a processor, the deeplearning model to the input image to recognize an identity of thesubject in the input image regarding being authorized to use theparticular workplace machine and a liveness of the subject. The livenessdetection task is configured to evaluate a plurality of differentdistractor modalities corresponding to different physical spoofingmaterials to prevent face spoofing for the face recognition task.

According to yet another aspect of the present invention, a computerprogram product is provided for machine access control. The computerprogram product includes a non-transitory computer readable storagemedium having program instructions embodied therewith. The programinstructions are executable by a computer to cause the computer toperform a method. The method includes capturing, by a camera, an inputimage of a subject purported to be a person associated with operating aparticular workplace machine. The method further includes storing, in amemory, a deep learning model configured to perform multi-task learningfor a pair of tasks including a liveness detection task and a facerecognition task. The method also includes applying, by a processor, thedeep learning model to the input image to recognize an identity of thesubject in the input image regarding being authorized to use theparticular workplace machine and a liveness of the subject. The livenessdetection task is configured to evaluate a plurality of differentdistractor modalities corresponding to different physical spoofingmaterials to prevent face spoofing for the face recognition task.

These and other features and advantages will become apparent from thefollowing detailed description of illustrative embodiments thereof,which is to be read in connection with the accompanying drawings.

BRIEF DESCRIPTION OF DRAWINGS

The disclosure will provide details in the following description ofpreferred embodiments with reference to the following figures wherein:

FIG. 1 shows an exemplary system for physical system access control, inaccordance with an embodiment of the present invention;

FIG. 2 shows another exemplary system for liveness detection forantispoof face recognition, in accordance with an embodiment of thepresent principles;

FIG. 3 shows an exemplary processing system to which the inventionprinciples may be applied, in accordance with an embodiment of thepresent invention;

FIG. 4 shows the live image recognition system of FIG. 2, in accordancewith an embodiment of the present invention;

FIG. 5 shows an exemplary model architecture for the deep learningengine of FIG. 4, in accordance with an embodiment of the presentinvention;

FIG. 6 shows an inception structure of the inception layers of FIG. 5,in accordance with an embodiment of the present invention;

FIG. 7 shows a loss structure of the loss layers of FIG. 5, inaccordance with an embodiment of the present invention;

FIGS. 8-10 show an exemplary method for liveness detection for facerecognition, in accordance with an embodiment of the present invention;

FIG. 11 shows yet another exemplary system for traffic enforcement, inaccordance with an embodiment of the present invention;

FIG. 12 shows yet another exemplary system for facility access control,in accordance with an embodiment of the present invention;

FIG. 13 shows yet another exemplary system for liveness detection forantispoof face recognition, in accordance with an embodiment of thepresent invention; and

FIG. 14 shows yet another exemplary system for login access control forsecure/private data, in accordance with an embodiment of the presentinvention.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS

The present invention is directed to liveness detection for antispoofface recognition.

The present invention advantageously distinguishes an image of a realface from that of a fake image using liveness detection. The fake imagecan be implemented, for example, by a high-quality three-dimensional(3D) mask, a paper print-out, an electronic display, or other“distractor” modality. The liveness detection supports face recognitionto determine the authenticity of the input and can operate with varioushardware. The present invention is hardware independent.

In an embodiment, a single image with purely appearance-basedinformation can be used to distinguish an image of a real face from theimage of a paper print-out of a face image. In an embodiment, one ormore deep learning methods can be used that capture both localinformation (such as, for example, but not limited to, texture) as wellas global information (such as, for example, but not limited to, shapeand illumination) to provide a multi-task deep learning framework forliveness detection (e.g., using a single image).

In an embodiment, a deep network structure is set up to specialize froma generic image classification problem to the binary (alive or notalive) classification problem of liveness detection.

In an embodiment, a multi-task framework is constructed for the livenessdetection task along with a large-scale face recognition task. Thisallows the network to learn better lower level features and improves itsgeneralization ability.

In an embodiment, data augmentation methods are provided for trainingthe deep learning architecture. The data augmentation methods improvedetection performance in multiple scenarios.

In an embodiment, liveness detection in accordance with the presentinvention can be implemented on several platforms where face recognitionis deployed such as, for example, but not limited to, vehicle electronicchannels, automated authentication kiosks (Automated Teller Machines(ATMs), etc.), passenger electronic channels, mobile devices (such as,for example, but not limited to, cellphones and laptops), and so forth.

FIG. 1 shows an exemplary system 100 for physical system access control,in accordance with an embodiment of the present invention. The system100 can be used to control access to a workplace machine.

The system 100 includes a camera system 110. While a single camerasystem 110 is shown in FIG. 1 for the sakes of illustration and brevity,it is to be appreciated that multiple camera systems can be also used,while maintaining the spirit of the present invention.

In the embodiment of FIG. 1, the camera system 110 is mounted on amounting entity 160. For the sake of illustration, the mounting entity160 involves a section of a wall (hereinafter “wall section”) 160 and amounting bracket 161. While a wall section 160 and a mounting bracket161 are shown for the sake of illustration, any other mountingentity(ies) can be used, as readily appreciated by one of ordinary skillin the art given the teachings of the present invention provided herein,while maintaining the spirit of the present invention. For example, thecamera system 110 can be mounted on a pole, and so forth. The precedingexamples are merely illustrative. It is to be appreciated that multiplemounting entities can be located at control hubs and sent to aparticular location as needed.

The camera system 110 can be a wireless camera system or can use one ormore antennas included on the wall section 160 and/or the mountingbracket 161 (or other mounting entity (e.g., building, pole, drone,etc.) to which the camera system 110 is mounted or proximate).

The system 100 further includes a server 120 for liveness detection forantispoof face recognition for permitting workplace machine use. Theserver 120 can located remote from, or proximate to, the camera system110. The server 120 includes a processor 121, a memory 122, and awireless transceiver 123. The processor 121 and the memory 122 of theremove server 120 are configured to perform liveness detection forantispoof face recognition based on images received from the camerasystem 110 by the (the wireless transceiver 123 of) the remote server120. To that end, the processor 121 and memory 122 can be configured toinclude components of a face recognition system and a live imagerecognition system. In this way, the face of a person 170 that is tooperate a workplace machine 190 can be recognized and a liveness of theperson 170 can also be determined. Here, liveness can be correlated toattentiveness, in that a sleeping person can be considered to lackliveness, therefore resulting in an alarm or other action beingperformed in order to prevent the inattentive employee from operating aworkplace machine 190. The face recognition and liveness detection canbe performed on multiple operators of multiple workplace machines 190.

Accordingly, some exemplary suitable environments to which the presentinvention can be applied can include any environments a person must berecognized in order to gain access to a workplace machine. Moreover,further exemplary suitable environments can include any environmentswhere liveness detection can be used to augment a face recognitionresult for workplace machine use control.

FIG. 2 shows another exemplary system 200 for liveness detection forantispoof face recognition, in accordance with an embodiment of thepresent principles. System 200 can represent an implementation of system100, in accordance with an embodiment of the present invention.

The system 200 includes a live image recognition system 220, a facerecognition system 230, and a computer processing system 240.

The computer processing system 240 essentially controls the othersystems of system 200, including the image recognition system 220 andthe face recognition system 230.

The live image recognition system 220 recognizes live images. The imagerecognition system 220 can, for example, detect an image of a liveobject versus an image of an inanimate object that is used for spoofing.

The face recognition system 230 recognizes faces. According, the facerecognition system 230 can also recognize individuals associated withrecognized faces.

The computer processing system 240 performs functions relating, forexample, but not limited to: (i) processing image recognition results;(ii) processing face recognition result (iii) performing one or moreactions based on the image recognition results and/or the facerecognition results.

The live image recognition system 220 and/or the face recognition system230 and/or the computer processing system 240 can include a camera. Forthe sake of illustration, a separate camera 271 is shown. The camera 271can capture images/video of the user. The images/video can then beprocessed by the computer processing system 240 and/or any of thesystems under its control. In an embodiment, the camera 271 can becapable of capturing still and moving images. In an embodiment, thecamera can acquire images in the visible and/or infra-red spectrum.

The live image recognition system 220 and/or the face recognition system230 and/or the computer processing system 240 can include a display. Forthe sake of illustration, a separate display 272 is shown. The display272 can show liveness detection (live image) information and/or facerecognition information to the user or other personnel (e.g., securitypersonnel). For example, the display 272 can indicate to a securityguard that someone is attempting to spook a face recognition system toallow the security guard to intervene.

The live image recognition system 220 and/or the face recognition system230 and/or the computer processing system 240 can include a speaker. Forthe sake of illustration, a separate speaker 273 is shown. The speaker273 can provide auditory guidance to the user (e.g., regarding facepositioning, and so forth) and/or a local alert that someone isattempting to spoof the system in order to draw attention to thatperson.

In an embodiment, one or more of the elements of system 200 isimplemented in the cloud using a cloud-based configuration.

In the embodiment shown in FIG. 2, the elements thereof areinterconnected by a bus(es)/network(s) 201. However, in otherembodiments, other types of connections can also be used. Moreover, inan embodiment, at least one of the elements of system 200 isprocessor-based.

Further, while one or more elements may be shown as separate elements,in other embodiments, these elements can be combined as one element. Forexample, while the camera 211 is shown as a separate entity from theface recognition system 230, in other embodiments the face recognitionsystem 230 can include the camera, obviating the need for a separatecamera. Also for example, while the live image recognition system 220 isshown as a separate entity from the face recognition system 230, inother embodiments the live image recognition system 220 can be includedin the face recognition system. Additionally for example, while the liveimage recognition system 220, the face recognition system 230, and thecomputer processing system 240 are shown as separate entities, in otherembodiments, the live image recognition system 220 and the facerecognition system 230 can be included in the computer processing system240. The converse is also applicable, where while one or more elementsmay be part of another element, in other embodiments, the one or moreelements may be implemented as standalone elements.

Moreover, one or more elements of FIG. 2 can be implemented in a cloudconfiguration including, for example, in a distributed configuration.

Additionally, one or more elements in FIG. 2 may be implemented by avariety of devices, which include but are not limited to, Digital SignalProcessing (DSP) circuits, programmable processors, Application SpecificIntegrated Circuits (ASICs), Field Programmable Gate Arrays (FPGAs),Complex Programmable Logic Devices (CPLDs), and so forth.

These and other variations of the elements of system 200 are readilydetermined by one of ordinary skill in the art, given the teachings ofthe present principles provided herein, while maintaining the spirit ofthe present principles.

FIG. 3 shows an exemplary processing system 300 to which the inventionprinciples may be applied, in accordance with an embodiment of thepresent invention. The processing system 300 can be used, for example,to implement the server 120 of FIG. 1, the overall system 200 or thecomputer processing system 240 of FIG. 2.

The processing system 300 includes at least one processor (CPU) 304operatively coupled to other components via a system bus 302. A cache306, a Read Only Memory (ROM) 308, a Random Access Memory (RAM) 310, aninput/output (I/O) adapter 320, a sound adapter 330, a network adapter340, a user interface adapter 350, and a display adapter 360, areoperatively coupled to the system bus 302.

A first storage device 322 and a second storage device 324 areoperatively coupled to system bus 302 by the I/O adapter 320. Thestorage devices 322 and 324 can be any of a disk storage device (e.g., amagnetic or optical disk storage device), a solid state magnetic device,and so forth. The storage devices 322 and 324 can be the same type ofstorage device or different types of storage devices.

A speaker 332 is operatively coupled to system bus 302 by the soundadapter 330. A transceiver 342 is operatively coupled to system bus 302by network adapter 340. A display device 362 is operatively coupled tosystem bus 302 by display adapter 360.

A first user input device 352, a second user input device 354, and athird user input device 356 are operatively coupled to system bus 302 byuser interface adapter 350. The user input devices 352, 354, and 356 canbe any of a keyboard, a mouse, a keypad, an image capture device, amotion sensing device, a microphone, a device incorporating thefunctionality of at least two of the preceding devices, and so forth. Ofcourse, other types of input devices can also be used, while maintainingthe spirit of the present invention. The user input devices 352, 354,and 356 can be the same type of user input device or different types ofuser input devices. The user input devices 352, 354, and 356 are used toinput and output information to and from system 300.

Of course, the processing system 300 may also include other elements(not shown), as readily contemplated by one of skill in the art, as wellas omit certain elements. For example, various other input devicesand/or output devices can be included in processing system 300,depending upon the particular implementation of the same, as readilyunderstood by one of ordinary skill in the art. For example, varioustypes of wireless and/or wired input and/or output devices can be used.Moreover, additional processors, controllers, memories, and so forth, invarious configurations can also be utilized as readily appreciated byone of ordinary skill in the art. These and other variations of theprocessing system 300 are readily contemplated by one of ordinary skillin the art given the teachings of the present invention provided herein.

FIG. 4 shows the live image recognition system 220 of FIG. 2, inaccordance with an embodiment of the present invention.

The live image recognition system 220 includes a data collector 401, adata collector 402, a data collector 403, a deep learning engine 410,and application related data 420.

The data collector 401 is for collecting 3D mask data 401A for 3D masksthat are used as potential inputs to a face recognition system.

The data collector 402 is for collecting printed paper data 402A forprinted papers that are used as potential inputs to a face recognitionsystem.

The data collector 403 is for collecting electronic display data 403Afor electronic displays that are used as potential inputs to a facerecognition system.

Regarding data collectors 401, 402, and 403, 3D masks, 2D printed paper,electronic devices with displays, respectively, are used as spoofingmaterial for face recognition. In an embodiment, a large variety of datasamples, which are commonly used in various applications/scenarios, iscollected. In an embodiment, the collected data is preferably providedby more than one person, e.g., wearing 3D masks with differentaccessories (such as, for example, but not limited to, wigs, scarf,glasses, and so forth). In an embodiment, the collected data preferablyincludes pictures taken using different cameras like Closed CircuitTelevision (CCTV) cameras, web cameras, mobile device cameras,industrial grade cameras, and so forth. The 2D printed paper andelectronic devices also presented in front of the cameras to collecttraining data. In an embodiment, the collected data involves personswith different nationalities and different postures to collect diversetraining data.

The deep learning based engine 410 includes a training portion 410A andan architecture portion 410B. The deep learning based engine 410performs deep learning for liveness detection for face recognition.

Regarding the architecture portion 410B of the deep learning basedengine 410, in an embodiment, a multi-task learning objective is set upto augment liveness detection with a large-scale face recognition task.In an embodiment, features at the lower layers in the deep learningarchitecture are shared between these two tasks.

Further regarding the architecture portion 410B of the deep learningbased engine 410, in an embodiment, data augmentations in the form ofchromatic transformations and image contrast enhancements can be used,in addition to spatial transformations.

Regarding the training portion 410A of the deep learning based engine410, in an embodiment, training is achieved by fine tuning the GoogLeNetarchitecture on a multitask objective that jointly optimizes livenessdetection and face recognition. This allows overcoming the challenge oflimited data for liveness detection by using large-scale facerecognition datasets.

Further regarding the architecture portion 410B of the deep learningbased engine 410, the architecture differs from a standard GoogLeNet bysetting up multi-task learning on top of the original structure, whichimproves the generalization ability of our model.

Further regarding the training portion 410A of the deep learning basedengine 410, in an embodiment, all of the layers are frozen except forthe last fully connected layer. Then the two tasks of liveness detectionand face recognition are combined (jointly optimized) to conduct themulti-task training. During the multi-task training, all weights of thelayers are unfrozen.

Regarding the deep learning based engine 410, data preprocessing isachieved by applying face detection to the data (input images). Then, inan embodiment, the input images are normalized to 256 by 256. By furtherrandom central cropping, the final output to the network is 228 by 228.In order to increase the diversity of the training data and improve themodel's ability of generalization, a data augmentation layer right afterthe image input. The image has a fifty percent probability to behorizontally flipped, zoomed, translated or rotated. Also, in anembodiment, an image contrast enhancement is applied by randomly addingone or more Gaussian distributed instances to the original RGB value.Additionally, in an embodiment, another image contrast enhancement isapplied by adding one or more Gaussian distributed instances to the HSVdomain and multiplying some coefficients to further adjust the S and V.

The application related data 420 can include data relating to vehiclebased applications 420A, kiosk based applications 420B, electronicchannel based applications 420C, mobile device based applications 420D,and Personal Computer (PC) based applications 420E. It is to beappreciated that the preceding applications are merely illustrative and,thus, the present invention can be applied to many other applications,as readily determined by one of ordinary skill in the art given theteachings of the present invention provided herein, while maintainingthe spirit of the present invention.

Regarding vehicle based applications 420A, the liveness detection enginecan be implemented on a novel platform for vehicle automatic clearancechannels, which can be used for automated authentication at highways,weighing stations and border control locations.

Regarding the kiosk based applications 420B, the liveness detectionengine can be implemented on a novel platform for automatedauthentication kiosks, which can be used for access control at airportsand so forth.

Regarding the electronic channel based applications 420C, the livenessdetection engine can be implemented on a novel platform for passengerautomatic clearance channels, which can be used for automated entryauthentication into secure areas, such as immigration at airports or atborder control locations.

Regarding the mobile device applications 420D, the liveness detectionengine can be implemented on mobile platforms such as cellphones andlaptops, for supporting face recognition in secure access, mobilepayments, banking and similar applications, and so forth.

Regarding the Personal Computer (PC) applications 420E, the livenessdetection engine can be implemented on PC platforms such as desktop andlaptops, for supporting face recognition in secure access, mobilepayments, banking and similar applications, and so forth.

FIG. 5 shows an exemplary model architecture 500 for the deep learningengine 410 of FIG. 4, in accordance with an embodiment of the presentinvention.

The model architecture 500 includes a convolutional max-pooling LocalResponse Normalization (LRN) layer 505, a convolutional max-poolingLocal Response Normalization (LRN) layer 510, an inceptionx4 layer 515,an inceptionx3 layer 520, an inceptionby2 layer 525, a Fully Connected(FC) layer 530, a loss layer 535, a FC layer 540, a FC layer 545, a losslayer 550, and a loss layer 555.

The convolutional max-pooling LRN layers 505 and 510 partition an inputimage into a set of non-overlapping rectangles and, for each suchsub-region, outputs the maximum. The intuition is that the exactlocation of a feature is less important than its rough location relativeto other features. The convolutional max-pooling LRN layers 505 and 510serve to progressively reduce the spatial size of the representation, toreduce the number of parameters and amount of computation in thenetwork, and hence to also control overfitting.

The convolution layer (e.g., layer 510) takes in the original image asinput and send output to the inception layers 515, 520 and 525, whichfurther generates the output for the fully connected (FC) layer 535,540, and 545. The output of FC layers predict the classification labeland penalized by the loss layers 530, 550, and 555, which conductback-propagation for the whole structure to update.

The high-level reasoning in the neural network is performed using the FClayers 530, 540, and 545. Neurons in a fully connected layer have fullconnections to all activations in the previous layer. Accordingly, theiractivations can be computed with a matrix multiplication followed by abias offset.

The loss layers 535, 550, and 555 specify how training penalizes thedeviation between the predicted and true labels. Various loss functionsappropriate can be used, while maintaining the spirit of the presentinvention.

FIG. 6 shows an inception structure 600 of the inception layers 515,520, and 525 of FIG. 5, in accordance with an embodiment of the presentinvention.

The inception structure 600 includes a depth concatenate element 601, aconvolutional 1×1 (Cony 1×1) element 611, a convolutional 1×1 (Cony 1×1)element 612, a Max pooling 3×3 element 613, a convolutional 1×1 (Cony1×1) element 621, a convolutional 5×5 (Cony 5×5) element 622, aconvolutional 1×1 (Cony 1×1) element 623, and a depth concatenateelement 631.

FIG. 7 shows a loss structure 700 of the loss layers 505 and 510 of FIG.5, in accordance with an embodiment of the present invention.

The loss structure 700 includes a Fully Connected (FC) layer 701, aliveness FC layer 711, a face recognition FC layer 712, a livenesspenalty element 721, and a face recognition penalty element 722.

FIGS. 8-9 show an exemplary method 800 for liveness detection for facerecognition, in accordance with an embodiment of the present invention.Steps 805 through 815 can be considered to correspond to a trainingstage 800A of method 800, while steps 820 through 825 can be consideredto correspond to a recognition stage 800B of method 800, and step 830can be considered to correspond to a post-recognition stage 800C.

At step 805, provide images of various types of spoofing materials usedfor spoofing a face recognition system. The various types of spoofingmaterials can include, for example, but are not limited to, images of 3Dmasks, images printed on paper, and images depicted on electronicdisplays.

At step 810, perform data preprocessing on the images. The datapreprocessing can involve, for example, but is not limited to, imagecontrast enhancements, normalization, cropping (e.g., random centralcropping, etc.), data augmentation, and so forth.

In an embodiment, step 810 includes one or more of steps 810A, 810B,810C, and 810D.

At step 810A, apply an image contrast enhancement to the images byrandomly adding one or more Gaussian distributed instances to anoriginal RGB value in a RGB color space. The original image is changedto another image, which shows the variance in the RGB color space foreach pixel. This changed image showing certain variance from theoriginal input is served as the network input, which artificiallyincrease the diversity of the input images.

At step 810B, apply an image contrast enhancement to the images byadding one or more Gaussian distributed instances to a Hue, Saturation,and Value (HSV) domain (cylindrical—coordinate representations of theRGB color space) and multiply some Gaussian distributed coefficients tofurther adjust S and V (brightness). By doing so, The Hue, Saturationand Value (brightness) are changed to create sufficient diversity forthe input of the network.

At step 810C, normalize the image (e.g., regarding size or some othercharacteristic).

At step 810D, perform cropping on the images. In an embodiment, randomcentral cropping can be performed on the images.

At step 815, train a liveness-based face recognition system using theimages preprocessed by step 810 to form a deep learning based model.Step 815 can involve training the deep learning based engine.

In an embodiment, step 815 includes one or more of steps 815A and 815B.

At step 815A, freeze all layers except for the last fully connectedlayer.

At step 815B, perform multi-task training involving a liveness detectiontask and a face recognition task. In an embodiment, all of the weightsof the layers can be unfrozen during the multi-task training.

At step 820, receive an input image of a person to be recognized.

At step 825, perform a multi-task operation jointly involving livenessdetection and face recognition for a particular application, using thedeep learning based model. The particular application can include, butis not limited to, a vehicle based application, a kiosk basedapplication, an electronic channel based application, a mobile deviceapplication, and a personal computer application.

At step 830, perform one or more actions based on a result of themulti-task operation. For example, the one or more actions can bedirected to one or more of the following: identifying the person andalso determining that the person is live; traffic enforcement; facilityaccess control; physical system (e.g., workplace machine) accesscontrol; and login access control (e.g., to secure/private data).

In an embodiment, step 830 can include one or more of steps 830A through830E.

At step 830A, corresponding to identifying the person and alsodetermining that the person is live, perform one or more actions thatcan include, but are not limited to, one or more of the following:permitting or blocking a purchase of an item; generating local and/orremote alarm; and so forth.

At step 830B, corresponding to traffic enforcement, perform one or moreactions that can include, but are not limited to, one or more of thefollowing: forwarding the input image of the one or more subjects in themotor vehicle to a corresponding traffic enforcement authority,responsive to the motor vehicle committing a traffic violation;forwarding the input image, that depicts a particular one of the one ormore subjects that is located in an operating location in the motorvehicle, to a corresponding traffic enforcement authority, responsive toa liveness determination of another one of the one or more subjects inthe motor vehicle being determined as not live and a location of themotor vehicle being in a High Occupancy Vehicle (HOV) lane; forwardingthe input image, that depicts a particular one of the one or moresubjects that is located in an operating location in the motor vehicleand another one of the one or more subjects located in a non-operatingposition in the motor vehicle, to a corresponding traffic enforcementauthority, responsive to a liveness determination of the other one ofthe one or more subjects being determined as not live and a location ofthe motor vehicle being in a HOV lane; forwarding an image of thevehicle operator (when a liveness of a passenger “object” has beendetermined to be “not live”); capturing a more expansive image of theuser (who should be proximate to the spoofing object) in order tocapture the users' actual face (or license plate in the case of the userutilizing a fake passenger while driving in the HOV lane) and forwardingthat expansive image to a corresponding traffic enforcement authority.It is to be appreciated that the initially listed action can encompassthe actions that follow.

At step 830C, corresponding to facility access control, the one or moreactions can include, but are not limited to, one or more of thefollowing: permitting or restricting access to an object and/or afacility; locking a door or area to keep someone out or to keep someonein; generating local and/or remote alarm (e.g., indicative of a securitybreach of the facility); and so forth.

At step 830D, corresponding to physical system (e.g., workplace machine)access control, the one or more actions can include, but are not limitedto, one or more of the following: powering down or powering up theworkplace machine (e.g., the controlled system, machine, and/or deviceor a portion thereof); locking or unlocking a physical or electroniclock that blocks operation of the workplace machine (e.g., thecontrolled system, machine, and/or device or a portion thereof);generating local and/or remote alarm (e.g., indicative of unauthorizedattempted use of the workplace machine); and so forth.

At step 830E, corresponding to login access control (e.g., tosecure/private data), the one or more actions can include, but are notlimited to, one or more of the following: permitting or restrictingaccess (e.g., to secure/private data); generating local and/or remotealarm (e.g., indicative of unauthorized attempted access to, e.g.,secure/private data); and so forth. Access restriction can be achievedusing, for example, a switch or other physical element to prevent accessto the secure data.

As is evident to one of ordinary skill in the art, the action(s) takenis(are) dependent upon the type of application to which the presentinvention is applied.

FIG. 11 shows yet another exemplary system 1100 for traffic enforcement,in accordance with an embodiment of the present invention.

The system 1100 includes a camera system 1110. While a single camerasystem 1110 is shown in FIG. 11 for the sakes of illustration andbrevity, it is to be appreciated that multiple camera systems can bealso used, while maintaining the spirit of the present invention.

In the embodiment of FIG. 11, the camera system 1110 is mounted on amounting entity 1160. For the sake of illustration, the mounting entity1160 is a pole 1160. The pole 1160 is also used to support a stop sign.Of course, a dedicated pole or other mounting entity could also be used.Thus, while a pole 1160 is shown for the sake of illustration, any othermounting entity can be used, as readily appreciated by one of ordinaryskill in the art given the teachings of the present invention providedherein, while maintaining the spirit of the present invention. Forexample, the camera system 1110 can be mounted on a building, a drone,and so forth. The preceding examples are merely illustrative. It is tobe appreciated that multiple mounting entities can be located at controlhubs and sent to a particular location as needed.

The camera system 1110 can be a wireless camera system or can use one ormore antennas included on the pole 1160 (or other mounting entity (e.g.,building, drone, etc.) to which the camera system 1110 is mounted orproximate).

The system 1100 further includes a server 1120 for traffic enforcement.The server 1120 can be configured to perform traffic enforcement basedon liveness detection for antispoof face recognition. The server 1120can located remote from, or proximate to, the camera system 1110. Theserver 1120 includes a processor 1121, a memory 1122, and a wirelesstransceiver 1123. The processor 1121 and the memory 1122 of the removeserver 1120 are configured to perform liveness detection for antispoofface recognition based on images received from the camera system 1110 bythe (the wireless transceiver 1123 of) the remote server 1120. To thatend, the processor 1121 and memory 1122 can be configured to includecomponents of a face recognition system and a live image recognitionsystem. In this way, the face of a person 1170 in a vehicle 1180 can berecognized and a liveness of the person 1170 can also be determined.Accordingly, a vehicle driver can be positively identified andassociated with a traffic offense, while the state of liveness of a“passenger object” (false person such as, for example, a mannequin), ifpresent, can also be identified and associated with a traffic offense(violation of the number of persons allowed in a High Occupancy Vehicle(HOV) lane) for the vehicle driver.

Accordingly, some exemplary suitable environments to which the presentinvention can be applied can include any environments a face recognitionresult can be associated with traffic enforcement. Moreover, furtherexemplary suitable environments can include any environments whereliveness detection can be used to augment a face recognition result fortraffic enforcement.

FIG. 12 shows yet another exemplary system 1200 for facility accesscontrol, in accordance with an embodiment of the present invention.

The system 1200 includes a camera system 1210. While a single camerasystem 1210 is shown in FIG. 12 for the sakes of illustration andbrevity, it is to be appreciated that multiple camera systems can bealso used, while maintaining the spirit of the present invention.

In the embodiment of FIG. 12, the camera system 1210 is mounted on amounting entity 1260. For the sake of illustration, the mounting entity1260 is an arch structure 1260 having a controlled gate 1261. The gate1261 can be normally closed and then opened based on a recognitionresult regarding the person 1270 attempting to gain access to thefacility. While an arch structure 1260 with a gate 1261 is shown for thesake of illustration, any other mounting entity can be used, as readilyappreciated by one of ordinary skill in the art given the teachings ofthe present invention provided herein, while maintaining the spirit ofthe present invention. For example, the camera system 1210 can bemounted on a building, a pole, and so forth. The preceding examples aremerely illustrative. It is to be appreciated that multiple mountingentities can be located at control hubs and sent to a particularlocation as needed.

The camera system 1210 can be a wireless camera system or can use one ormore antennas included on the arch structure 1260 (or other mountingentity (e.g., building, drone, etc.) to which the camera system 1210 ismounted or proximate).

The system 1200 further includes a server 1220 for liveness detectionfor antispoof face recognition. The server 1220 can located remote from,or proximate to, the camera system 1210. The server 1220 includes aprocessor 1221, a memory 1222, and a wireless transceiver 1223. Theprocessor 1221 and the memory 1222 of the remove server 1220 areconfigured to perform liveness detection for antispoof face recognitionbased on images received from the camera system 1210 by the (thewireless transceiver 1223 of) the remote server 1220. To that end, theprocessor 1221 and memory 1222 can be configured to include componentsof a face recognition system and a live image recognition system. Inthis way, the face of a person 1270 in a vehicle 1280 can be recognizedand a liveness of the person 1270 can also be determined for the purposeof facility access control. The face recognition and liveness detectioncan be performed on multiple vehicle occupants including the driver.Moreover, persons walking up to the arch structure 1260 (i.e., withoutbeing in a vehicle) can also be recognized and so forth in accordancewith the present invention.

Accordingly, some exemplary suitable environments to which the presentinvention can be applied can include any environments a person must berecognized in order to gain access to a facility. Moreover, furtherexemplary suitable environments can include any environments whereliveness detection can be used to augment a face recognition result forfacility access control.

FIG. 13 shows yet another exemplary system 1300 for liveness detectionfor antispoof face recognition, in accordance with an embodiment of thepresent invention.

The system 1300 includes a camera system 1310. While a single camerasystem 1310 is shown in FIG. 13 for the sakes of illustration andbrevity, it is to be appreciated that multiple camera systems can bealso used, while maintaining the spirit of the present invention.

In the embodiment of FIG. 13, the camera system 1310 is mounted on amounting entity 1360. For the sake of illustration, the mounting entity1360 is a pole 1360. While a pole 1360 is shown for the sake ofillustration, any other mounting entity can be used, as readilyappreciated by one of ordinary skill in the art given the teachings ofthe present invention provided herein, while maintaining the spirit ofthe present invention. For example, the camera system 1310 can bemounted on a building, a drone, and so forth. The preceding examples aremerely illustrative. It is to be appreciated that multiple mountingentities can be located at control hubs and sent to a particularlocation as needed.

The camera system 1310 can be a wireless camera system or can use one ormore antennas included on the pole 1360 (or other mounting entity (e.g.,building, drone, etc.) to which the camera system 1310 is mounted orproximate).

The system 1300 further includes a server 1320 for liveness detectionfor antispoof face recognition. The server 1320 can located remote from,or proximate to, the camera system 1310. The server 1320 includes aprocessor 1321, a memory 1322, and a wireless transceiver 1323. Theprocessor 1321 and the memory 1322 of the remove server 1320 areconfigured to perform liveness detection for antispoof face recognitionbased on images received from the camera system 1310 by the (thewireless transceiver 1323 of) the remote server 1320. To that end, theprocessor 1321 and memory 1322 can be configured to include componentsof a face recognition system and a live image recognition system. Inthis way, the face of a person 1370 in a vehicle 1380 can be recognizedand a liveness of the person 1370 can also be determined.

Accordingly, some exemplary suitable environments to which the presentinvention can be applied can include any environments where livenessdetection can be used to augment a face recognition result. For example,a mass transit hub or stop, a battlefield, and/or any place wherepotential causalities can occur and where liveness detection can be usedto advantageously augment a face recognition result (e.g., in order todetermine a number of injured, a number of non-injured, a ratio ofinjured versus non-injured, etc.).

FIG. 14 shows yet another exemplary system 1400 for login access controlfor secure/private data, in accordance with an embodiment of the presentinvention.

The system 1400 includes a camera system 1410. While a single camerasystem 1410 is shown in FIG. 14 for the sakes of illustration andbrevity, it is to be appreciated that multiple camera systems can bealso used, while maintaining the spirit of the present invention.

In the embodiment of FIG. 14, the camera system 1410 is embodied in alaptop 1460. Hence, the laptop can be considered a mounting entity forthe camera system 1410. While a laptop 1460 is shown for the sake ofillustration, any other mounting entity(ies) can be used, as readilyappreciated by one of ordinary skill in the art given the teachings ofthe present invention provided herein, while maintaining the spirit ofthe present invention. For example, the camera system 1410 can bemounted on a pole, and so forth. The preceding examples are merelyillustrative. It is to be appreciated that multiple mounting entitiescan be located at control hubs and sent to a particular location asneeded.

The camera system 1410 can communicate with the server 1420 using awireless transceiver 1410A of the laptop 1410.

The system 1400 further includes a server 1420 for liveness detectionfor antispoof face recognition for controlled access to secure/privatedata on a server 1490. The server 1420 can located remote from, orproximate to, the camera system 1410. The server 1420 includes aprocessor 1421, a memory 1422, and a wireless transceiver 1423. Theprocessor 1421 and the memory 1422 of the remove server 1520 areconfigured to perform liveness detection for antispoof face recognitionbased on images received from the camera system 1410 by the (thewireless transceiver 1423 of) the remote server 1420. To that end, theprocessor 1421 and memory 1422 can be configured to include componentsof a face recognition system and a live image recognition system. Inthis way, the face of a person 1470 that is to login to a network (e.g.,network 1480) or device (e.g., server 1490) can be recognized and aliveness of the person 1470 can also be determined in order to controlaccess to the secure/private data.

The system 1400 can be used to control access to the server 1490 throughcomputer network 1480. Access control is performed by the server 1420.The elements shown relative to FIG. 14 are set forth for the sake ofillustration. However, it is to be appreciated that the presentinvention can be applied to other network configurations and otheroperational environments as readily contemplated by one of ordinaryskill in the art given the teachings of the present invention providedherein, while maintaining the spirit of the present invention.

A description will now be given of some of the many attendant advantagesof the present invention, in accordance with one or more embodiments ofthe present invention.

In an embodiment, the present invention uses a single image, thusreducing complexity of the acquisition system compared to the prior art.

In an embodiment, the present invention achieves very high accuracy andnegligible false alarms, thus providing a higher quality of the resultthan previous methods.

In an embodiment, a purely image-based system is used, thus reducing thecost of the system compared to using active sensors.

In an embodiment, the robustness of the present invention is higher thanprior art solutions, since passive imaging is not sensitive todeployment configurations.

In an embodiment, the present invention can achieve very highgenerality, thus being capable of being used to support any applicationwhere face recognition is deployed. In an embodiment, no additionalhardware is required, as the present invention can be incorporated intoan existing face recognition system.

Embodiments described herein may be entirely hardware, entirely softwareor including both hardware and software elements. In a preferredembodiment, the present invention is implemented in software, whichincludes but is not limited to firmware, resident software, microcode,etc.

Embodiments may include a computer program product accessible from acomputer-usable or computer-readable medium providing program code foruse by or in connection with a computer or any instruction executionsystem. A computer-usable or computer readable medium may include anyapparatus that stores, communicates, propagates, or transports theprogram for use by or in connection with the instruction executionsystem, apparatus, or device. The medium can be magnetic, optical,electronic, electromagnetic, infrared, or semiconductor system (orapparatus or device) or a propagation medium. The medium may include acomputer-readable storage medium such as a semiconductor or solid statememory, magnetic tape, a removable computer diskette, a random accessmemory (RAM), a read-only memory (ROM), a rigid magnetic disk and anoptical disk, etc.

Each computer program may be tangibly stored in a machine-readablestorage media or device (e.g., program memory or magnetic disk) readableby a general or special purpose programmable computer, for configuringand controlling operation of a computer when the storage media or deviceis read by the computer to perform the procedures described herein. Theinventive system may also be considered to be embodied in acomputer-readable storage medium, configured with a computer program,where the storage medium so configured causes a computer to operate in aspecific and predefined manner to perform the functions describedherein.

A data processing system suitable for storing and/or executing programcode may include at least one processor coupled directly or indirectlyto memory elements through a system bus. The memory elements can includelocal memory employed during actual execution of the program code, bulkstorage, and cache memories which provide temporary storage of at leastsome program code to reduce the number of times code is retrieved frombulk storage during execution. Input/output or I/O devices (includingbut not limited to keyboards, displays, pointing devices, etc.) may becoupled to the system either directly or through intervening I/Ocontrollers.

Network adapters may also be coupled to the system to enable the dataprocessing system to become coupled to other data processing systems orremote printers or storage devices through intervening private or publicnetworks. Modems, cable modem and Ethernet cards are just a few of thecurrently available types of network adapters.

The foregoing is to be understood as being in every respect illustrativeand exemplary, but not restrictive, and the scope of the inventiondisclosed herein is not to be determined from the Detailed Description,but rather from the claims as interpreted according to the full breadthpermitted by the patent laws. It is to be understood that theembodiments shown and described herein are only illustrative of theprinciples of the present invention and that those skilled in the artmay implement various modifications without departing from the scope andspirit of the invention. Those skilled in the art could implementvarious other feature combinations without departing from the scope andspirit of the invention. Having thus described aspects of the invention,with the details and particularity required by the patent laws, what isclaimed and desired protected by Letters Patent is set forth in theappended claims.

What is claimed is:
 1. A machine access control system, comprising: acamera configured to capture an input image of a subject purported to bea person associated with operating a particular workplace machine; amemory storing a deep learning model configured to perform jointmulti-task learning for a pair of tasks including a liveness detectiontask and a face recognition task; and a processor configured to applythe deep learning model to the input image to recognize an identity ofthe subject in the input image regarding being authorized to use theparticular workplace machine and a liveness of the subject, and whereinthe liveness detection task is configured to evaluate a plurality ofdifferent distractor modalities corresponding to different physicalspoofing materials to prevent face spoofing for the face recognitiontask.
 2. The access control system of claim 1, wherein the processor isfurther configured to control a powered status of the workplace machine,responsive to results of the liveness detection task and the facerecognition task, the powered status selectively being controlled to oneof powered and unpowered.
 3. The access control system of claim 1,wherein the processor is further configured to control a lock status ofa physical or electronic lock that blocks operation of the workplacemachine, responsive to results of the liveness detection task and theface recognition task, the lock status selectively being controlled toone of locked and unlocked.
 4. The access control system of claim 1,wherein the processor is further configured to generate an alarmindicating an unauthorized attempted use of the workplace machine,responsive to results of the liveness detection task and the facerecognition task.
 5. The face recognition system of claim 1, wherein thedifferent physical spoofing materials comprise a spoofing materialsselected from the group consisting of a 3D mask, a printed image, and anelectronic display.
 6. The face recognition system of claim 1, whereinthe processor is further configured to perform data preprocessing on theplurality of input images selected from the group consisting of imagecontrast enhancements, data augmentation, and cropping.
 7. The facerecognition system of claim 1, wherein the processor is furtherconfigured to apply an image contrast enhancement to at least one of theplurality of input images by randomly adding one or more Gaussiandistributed instances to an original RGB value of the at least one ofthe plurality of images.
 8. The face recognition system of claim 1,wherein the processor is further configured to apply an image contrastenhancement to at least one of the plurality of input images by addingone or more Gaussian distributed instances to a Hue, Saturation, andValue (HSV) domain and multiplying two or more coefficients in the HSVdomain to further adjust the Saturation and the Value of the at leastone of the plurality of input images.
 9. The face recognition system ofclaim 1, wherein the processor is further configured to perform randomcentral cropping on at least some of the plurality of input images. 10.The face recognition system of claim 1, wherein the processor is furtherconfigured to perform a data augmentation process on at least one of theplurality of input images to augment data in the images and increase agenerality of the deep learning model to the different distractormodalities.
 11. The face recognition system of claim 1, wherein the deeplearning model is formed to include a plurality of layers, and theprocessor is further configured to train the deep learning model byfreezing each of the plurality of layers except a last fully connectedlayer therein, and performing multi-task training by combining theliveness detection task and the face recognition task, wherein duringthe multi-task training, all weights of the plurality of layers areunfrozen.
 12. The face recognition system of claim 1, wherein the deeplearning model is formed using an inception structure configured tomultiply an output of a convolution layer of the deep learning modelwith at least one of the plurality of input images to produce a newimage having amplified extracted features relative to the at least oneof the plurality of input images.
 13. The face recognition system ofclaim 1, wherein the deep learning model is formed using a lossstructure that includes a face liveness penalty and a face recognitionpenalty.
 14. A computer-implemented method for machine access control,comprising: capturing, by a camera, an input image of a subjectpurported to be a person associated with operating a particularworkplace machine; storing, in a memory, a deep learning modelconfigured to perform joint multi-task learning for a pair of tasksincluding a liveness detection task and a face recognition task; andapplying, by a processor, the deep learning model to the input image torecognize an identity of the subject in the input image regarding beingauthorized to use the particular workplace machine and a liveness of thesubject, and wherein the liveness detection task is configured toevaluate a plurality of different distractor modalities corresponding todifferent physical spoofing materials to prevent face spoofing for theface recognition task.
 15. The computer-implemented method of claim 14,further comprising controlling a powered status of the workplacemachine, responsive to results of the liveness detection task and theface recognition task, the powered status selectively being controlledto one of powered and unpowered.
 16. The computer-implemented method ofclaim 14, further comprising controlling a lock status of a physical orelectronic lock that blocks operation of the workplace machine,responsive to results of the liveness detection task and the facerecognition task, the lock status selectively being controlled to one oflocked and unlocked.
 17. The computer-implemented method of claim 14,further comprising generating an alarm indicating an unauthorizedattempted use of the workplace machine, responsive to results of theliveness detection task and the face recognition task.
 18. Thecomputer-implemented method of claim 14, wherein the different physicalspoofing materials comprise a spoofing materials selected from the groupconsisting of a 3D mask, a printed image, and an electronic display. 19.The computer-implemented method of claim 14, wherein the processor isfurther configured to perform data preprocessing on the plurality ofinput images selected from the group consisting of image contrastenhancements, data augmentation, and cropping.
 20. A computer programproduct for machine access control, the computer program productcomprising a non-transitory computer readable storage medium havingprogram instructions embodied therewith, the program instructionsexecutable by a computer to cause the computer to perform a methodcomprising: capturing, by a camera, an input image of a subjectpurported to be a person associated with operating a particularworkplace machine; storing, in a memory, a deep learning modelconfigured to perform joint multi-task learning for a pair of tasksincluding a liveness detection task and a face recognition task; andapplying, by a processor, the deep learning model to the input image torecognize an identity of the subject in the input image regarding beingauthorized to use the particular workplace machine and a liveness of thesubject, and wherein the liveness detection task is configured toevaluate a plurality of different distractor modalities corresponding todifferent physical spoofing materials to prevent face spoofing for theface recognition task.